# WinBook

> Task docs for Windows 11, Windows Server and PC hardware. Every page states the build, evidence grade and risk level it was tested at; lab pages are reproduced on Proxmox VE VMs or physical machines. An independent site, not affiliated with Microsoft.

Every page has a Markdown version: add `.md` to its URL. Chinese index: https://winbook.fyi/zh/llms.txt

## Windows

- [Windows](https://winbook.fyi/en/windows.md): Windows 11 26H2, 25H2, LTSC and ARM64 by task: install, measure, develop, troubleshoot.
- [Family safety and child accounts: what works offline](https://winbook.fyi/en/windows/account/family-safety.md): How child accounts, screen time and content limits are enforced, which parts need a connection, and where the limits stop.
- [Windows Hello, PIN and password: how the three relate](https://winbook.fyi/en/windows/account/hello-pin.md): Why the PIN is not a weaker password, what happens when you forget it, and which recovery path actually works.
- [Local account or Microsoft account: what actually differs](https://winbook.fyi/en/windows/account/local-vs-msa.md): Device encryption, account recovery, settings sync and app access depend on this choice — and switching later has a cost.
- [A corrupt profile: create a user and migrate properly](https://winbook.fyi/en/windows/account/profile-corruption.md): How to confirm the profile is the problem, move the data that matters, and rebind the apps that do not survive the move.
- [PowerToys: the modules worth enabling](https://winbook.fyi/en/windows/customise/powertoys.md): Which modules earn their place on a normal desktop, what each one costs in resources, and the shortcut conflicts you will hit.
- [Windows Sandbox: the right way to open a suspicious file](https://winbook.fyi/en/windows/customise/sandbox.md): What the sandbox isolates, what still leaks through, and when a full VM is the better answer.
- [Screenshot on Windows 11: every method, and which one to use](https://winbook.fyi/en/windows/customise/screenshot.md): Snipping Tool, Win+Shift+S, PrtScn, Win+PrtScn, Game Bar and PowerShell capture — what each one does to the clipboard, the file and the screen.
- [Time sync and the dual-boot UTC trap](https://winbook.fyi/en/windows/customise/time-sync.md): Fix a clock that drifts or is 8 hours off, understand w32tm, and stop dual-boot from resetting your time zone.
- [GPU passthrough to a Windows VM: what it can and cannot measure](https://winbook.fyi/en/windows/dev/gpu-passthrough.md): Plan a PVE GPU passthrough Windows VM, understand IOMMU/vfio/vBIOS issues, and separate VM results from bare-metal performance.
- [Hyper-V, WSL2, VMware and VirtualBox on one Windows PC](https://winbook.fyi/en/windows/dev/hyperv-coexistence.md): Understand why WSL2 needs virtualization, how Hyper-V coexists with VMware/VirtualBox, and what to check before disabling a feature.
- [Windows 11 on Proxmox VE: q35, OVMF, vTPM, VirtIO and snapshots](https://winbook.fyi/en/windows/dev/pve-windows-vm.md): Build a Windows 11 26H2 VM on PVE 9.2.2 with UEFI, vTPM 2.0, VirtIO drivers, QEMU Guest Agent and a snapshot chain that can be rebuilt.
- [Windows Terminal + PowerShell 7: a clean, repeatable setup](https://winbook.fyi/en/windows/dev/terminal.md): Install Windows Terminal and PowerShell 7 side by side, set a sane default profile, font and settings.json, and avoid profile scripts you do not understand.
- [winget: make a Windows dev environment repeatable](https://winbook.fyi/en/windows/dev/winget.md): Use winget to search, install, upgrade and export Windows packages, build a reproducible manifest, and avoid supply-chain traps.
- [WSL2 networking: mirrored mode, localhost and LAN access](https://winbook.fyi/en/windows/dev/wsl-networking.md): Choose between WSL2 NAT and mirrored networking, edit .wslconfig correctly, and test Windows-to-Linux and Linux-to-Windows connections.
- [WSL2 + Dev Drive on D: without filling C:](https://winbook.fyi/en/windows/dev/wsl2.md): Move WSL2's Ubuntu VHDX and your Windows-side projects and package caches to a D: Dev Drive on Windows 11 26H2 — with the ReFS limits Microsoft documents.
- [File Explorer in Windows 11: tabs, context menus and what actually changed](https://winbook.fyi/en/windows/files/explorer.md): What the new Explorer does differently, where the old right-click menu went, and the settings that change behaviour rather than looks.
- [OneDrive Files On-Demand: where the bytes actually are](https://winbook.fyi/en/windows/files/onedrive-files-on-demand.md): What the three file states mean, why freeing space is not deleting, and what happens to your data when the account goes away.
- [Storage Sense and Disk Cleanup: what is safe to delete](https://winbook.fyi/en/windows/files/storage-sense.md): Which cleanup targets are free space and which ones cost you something, how to run WinSxS cleanup, and what actually fills a modern drive.
- [Symlinks, junctions and the long-path limit](https://winbook.fyi/en/windows/files/symlinks-long-paths.md): How symbolic links, junctions and hard links differ, when each is the right tool, and how to get past the 260-character path limit.
- [Windows 11 boot loop or automatic repair: the WinRE order that works](https://winbook.fyi/en/windows/fixes/boot-loop.md): A calm recovery sequence for a Windows 11 boot loop: firmware, BitLocker, WinRE startup repair, uninstall updates, restore point, command prompt and reinstall.
- [DISM and SFC: the right order, and how to read the result](https://winbook.fyi/en/windows/fixes/dism-sfc.md): Use DISM CheckHealth/ScanHealth/RestoreHealth and SFC /scannow in the correct order, read CBS/DISM logs, and avoid the common myths.
- [DLL missing and 0xc000007b: find the component, not a download](https://winbook.fyi/en/windows/fixes/dll-runtime.md): Diagnose missing DLL and 0xc000007b errors by bitness, runtime family and component store — and why downloading a DLL from a random site is the wrong fix.
- [Internet works in one app but not another: DNS, proxy and route checks](https://winbook.fyi/en/windows/fixes/dns.md): Diagnose Windows 11 name-resolution failures with Resolve-DnsName, nslookup, proxy settings, hosts file, VPN and route tests before changing DNS servers.
- [Explorer freezes or right-click is slow: find the shell extension](https://winbook.fyi/en/windows/fixes/explorer.md): Diagnose Windows 11 Explorer hangs and slow context menus with Event Viewer, Reliability Monitor, clean boot and shell-extension isolation.
- [Windows Update stuck or rolling back: read the logs before deleting folders](https://winbook.fyi/en/windows/fixes/update-stuck.md): Diagnose Windows 11 26H2 update failures with update history, WindowsUpdate.log, CBS/DISM logs and the common 0x800… codes, without destructive folder deletion.
- [Wi-Fi drops and Bluetooth disconnects: driver, power and interference](https://winbook.fyi/en/windows/fixes/wifi-bluetooth.md): Diagnose Windows 11 Wi-Fi/Bluetooth instability by adapter driver, power management, band/channel, USB 3 interference and router settings — without disabling security.
- [AMD Adrenalin: driver, FSR and Anti-Lag without the marketing](https://winbook.fyi/en/windows/gaming/amd.md): A practical AMD Radeon setup on Windows 11: driver install, factory reset, FSR, Anti-Lag 2, Chill and the settings worth measuring.
- [Game Mode, Game Bar and fullscreen optimizations: keep, disable or ignore?](https://winbook.fyi/en/windows/gaming/game-mode.md): Understand what Windows 11 Game Mode, Game Bar capture and fullscreen optimizations actually do, and how to test them without placebo.
- [HDR on Windows 11: requirements, calibration and when to leave it off](https://winbook.fyi/en/windows/gaming/hdr.md): Enable HDR only when the display can show it: panel requirements, Windows HDR settings, calibration, Auto HDR and game compatibility.
- [Intel Arc on Windows 11: driver, Resizable BAR and compatibility](https://winbook.fyi/en/windows/gaming/intel-arc.md): Install Intel Arc graphics drivers correctly, verify Resizable BAR and Above 4G decoding, and understand the compatibility limits before buying.
- [Gaming laptop power and thermals: measure before you “optimise”](https://winbook.fyi/en/windows/gaming/laptop-thermals.md): Read GPU TGP, CPU package power, temperatures and clocks, identify real throttling, and avoid unsafe undervolt/BIOS advice.
- [Measure gaming performance before you tweak: frame time, 1% low, latency](https://winbook.fyi/en/windows/gaming/measure.md): A repeatable method for Windows 11 26H2 gaming measurements, including passthrough-VM caveats and a ledger for every change.
- [Memory integrity (HVCI): what it costs, and when to keep it on](https://winbook.fyi/en/windows/gaming/memory-integrity.md): Measured HVCI on/off on Windows 11 26H2: CPU encryption, compression and memory bandwidth, plus how to verify VBS status and handle incompatible drivers.
- [NVIDIA driver clean install: when DDU helps, and when it is overkill](https://winbook.fyi/en/windows/gaming/nvidia-clean-install.md): Install or clean-install an NVIDIA driver on Windows 11 without driver packs: normal update, custom clean install, DDU last resort, and verification.
- [NVIDIA App and Control Panel: the settings that actually change frame time](https://winbook.fyi/en/windows/gaming/nvidia-settings.md): A measured approach to NVIDIA low latency, V-Sync, G-SYNC, frame caps, power management and Reflex, without copying a universal settings list.
- [VRR, G-SYNC and FreeSync: how to verify it is actually working](https://winbook.fyi/en/windows/gaming/vrr.md): Enable variable refresh rate on Windows 11, check the cable/display/GPU chain, and test VRR instead of trusting a logo on the box.
- [A BitLocker recovery drill: where the key is and how to use it](https://winbook.fyi/en/windows/hardening/bitlocker-recovery-drill.md): The four places a recovery key can live, what triggers a recovery prompt, and a 15-minute drill to prove you can actually get back in.
- [Controlled folder access: ransomware protection with a maintenance bill](https://winbook.fyi/en/windows/hardening/controlled-folder-access.md): What it protects, why legitimate apps get blocked, and how to keep it useful instead of turning it off.
- [Core isolation, HVCI and LSA protection: on or off](https://winbook.fyi/en/windows/hardening/core-isolation.md): What each protection actually defends against, the real performance cost, and how to tell whether a driver is blocking it.
- [SmartScreen and 'unknown publisher': what is actually being blocked](https://winbook.fyi/en/windows/hardening/smartscreen.md): How reputation and Mark-of-the-Web decide whether a file runs, why your own build is flagged, and what to do before clicking through.
- [Windows 11 boot media: Media Creation Tool, Rufus, Ventoy — or the Installation Assistant](https://winbook.fyi/en/windows/install/boot-media.md): Choose between the Installation Assistant, Media Creation Tool, Rufus and Ventoy for a Windows 11 26H2 upgrade or clean install, understand GPT/UEFI and Secure Boot implications, and avoid modified images.
- [Clean install Windows 11 26H2: UEFI, TPM 2.0 and partitions](https://winbook.fyi/en/windows/install/clean.md): Install Windows 11 26H2 from official media: check UEFI, TPM 2.0 and Secure Boot, create the USB, partition the disk, finish OOBE and verify build 26300.9457.
- [Windows 11 driver order: chipset, network, GPU, audio, peripherals](https://winbook.fyi/en/windows/install/drivers.md): Install Windows 11 drivers in a deliberate order, verify with Device Manager and PnP status, and avoid driver packs and booster tools.
- [Windows 11 + Linux dual boot: UEFI, partitions, GRUB and BitLocker](https://winbook.fyi/en/windows/install/dual-boot.md): Plan a UEFI dual-boot system with Windows 11 and Linux: free space, shared ESP, Fast Startup, BitLocker, GRUB and recovery.
- [Windows 11 ISO: download, verify SHA-256, identify the build](https://winbook.fyi/en/windows/install/iso.md): Get the official Windows 11 26H2 ISO, record its SHA-256, compare it with the hash published by your source, and avoid modified images.
- [Windows 11 26H2 partitions: ESP, MSR, system, recovery and data](https://winbook.fyi/en/windows/install/partitions.md): Understand the UEFI/GPT partition layout Windows 11 creates, when to let Setup decide, and when manual partitioning is worth the risk.
- [Windows 11 install preflight: UEFI, Secure Boot, TPM 2.0 and 10 checks](https://winbook.fyi/en/windows/install/preflight.md): Run these ten checks before you boot Windows 11 setup: firmware mode, Secure Boot, TPM, CPU support, disk, network, backup, licence and recovery.
- [Screen recording: Game Bar, what it cannot capture, and the size problem](https://winbook.fyi/en/windows/media/capture.md): How Game Bar capture works, why some windows record black, and how hardware encoding changes file size and quality.
- [Video codecs: why some files will not play](https://winbook.fyi/en/windows/media/codecs.md): What Windows decodes out of the box, which codecs need a paid extension, and how to tell a codec problem from a broken file.
- [Colour management: ICC profiles and why wide-gamut looks wrong](https://winbook.fyi/en/windows/media/colour-management.md): How Windows applies colour profiles per display, why saturated panels oversaturate the desktop, and where HDR changes the rules.
- [Fonts and CJK rendering: missing glyphs, blur and the font cache](https://winbook.fyi/en/windows/media/fonts-cjk.md): Why a document shows boxes, how to rebuild the font cache, and why ClearType and scaling fight each other.
- [Where the boot minute goes](https://winbook.fyi/en/windows/perf/boot-time.md): Read the real boot timeline from Windows events, understand startup impact ratings, and stop blaming the wrong thing.
- [Scheduled tasks and wake timers: who wakes your PC at night](https://winbook.fyi/en/windows/perf/scheduled-tasks.md): Find tasks that run at logon or on a schedule, check which ones can wake the machine, and disable the right one.
- [Services: what is safe to disable (and what is not)](https://winbook.fyi/en/windows/perf/services.md): Why most service-tuning lists are wrong, how to read dependencies, and the small set of services that are genuinely optional.
- [Sleep, hibernate and Fast Startup: three switches people confuse](https://winbook.fyi/en/windows/perf/sleep-hibernate-faststartup.md): What each power state does, what Fast Startup actually writes to disk, and why it breaks dual boot and update troubleshooting.
- [Four Task Manager numbers people misread](https://winbook.fyi/en/windows/perf/task-manager-numbers.md): Commit size versus memory, GPU engines, the meaning of 100% disk, and why the totals never add up.
- [Bluetooth audio: codecs, LE Audio and where the latency comes from](https://winbook.fyi/en/windows/peripherals/bluetooth-audio.md): Why one headset sounds fine in a call and bad in a game, what LE Audio changes, and what Windows actually controls.
- [Printing and scanning: spooler triage that works](https://winbook.fyi/en/windows/peripherals/printing.md): Clear a stuck queue in the right order, choose between vendor and universal drivers, and get scan-to-PC working again.
- [Touchpads, pens and Precision drivers](https://winbook.fyi/en/windows/peripherals/touchpad-pen.md): Which driver your touchpad is using, where gesture settings actually live, and why pen pressure stops working after an update.
- [USB devices Windows will not recognise](https://winbook.fyi/en/windows/peripherals/usb-device.md): Read the error code, find which controller the port belongs to, and fix the power-management causes before reinstalling anything.
- [Windows on Arm in 2026: Arm64, Prism, 26H1 and 26H2](https://winbook.fyi/en/windows/platform/arm64.md): What Windows on Arm is, how native Arm64 and Prism emulation differ, why 26H1 and 26H2 are separate branches, and how to check whether your apps and games actually run.
- [Windows on Arm in 2026: 26H1, 26H2 and what actually runs](https://winbook.fyi/en/windows/platform/arm64-compatibility.md): Arm64 Windows in 2026: the 26H1 new-device branch, 26H2 annual release, Prism x86/x64 emulation, kernel-driver limits and a buying checklist.
- [Phone Link: what actually syncs, and what it never will](https://winbook.fyi/en/windows/remote/phone-link.md): Pairing, the notification and photo features that work, the ones that depend on the phone OS, and why it is not a backup.
- [Quick Assist: helping someone without opening a port](https://winbook.fyi/en/windows/remote/quick-assist.md): How the session is authorised, what the helper can and cannot do, and why an unsolicited request is always a scam.
- [Remote Desktop host setup: what to enable and what to expose](https://winbook.fyi/en/windows/remote/rdp-host.md): Turn on RDP safely, understand the edition limits, fix the certificate warning, and know why port forwarding to the internet is a bad idea.
- [LAN shares and SMB versions: why \\NAS disappeared](https://winbook.fyi/en/windows/remote/smb-shares.md): Share versus NTFS permissions, the SMB1 removal that broke old devices, and the guest-access default that blocks NAS logins.
- [Local account vs Microsoft account on Windows 11](https://winbook.fyi/en/windows/security/account.md): Choose between a local Windows account and a Microsoft account by recovery, BitLocker, Store, sync and privacy trade-offs, without OOBE bypass scripts.
- [Windows 11 activation: digital licences, hardware changes and what to do when it fails](https://winbook.fyi/en/windows/security/activation.md): How activation is bound to hardware, what survives a motherboard swap, how to move a retail licence legitimately, and how to read the actual error.
- [Windows 11 backup: Windows Backup, OneDrive or File History?](https://winbook.fyi/en/windows/security/backup.md): Compare Windows Backup, OneDrive and File History for files, versions and full-system recovery, and build a 3-2-1 plan that you have actually restored.
- [BitLocker on Windows 11: when to enable it, and how not to lock yourself out](https://winbook.fyi/en/windows/security/bitlocker.md): BitLocker protects data at rest, not a running PC. Learn the TPM requirements, recovery key, suspend procedure and the mistakes that cause lockouts.
- [Defender and SmartScreen on Windows 11: is the default enough?](https://winbook.fyi/en/windows/security/defender.md): How Microsoft Defender, SmartScreen, reputation and controlled folder access work together, when a third-party AV makes sense, and why stacking antivirus is a bad idea.
- [Windows 11 privacy settings: what to turn off, what to leave alone](https://winbook.fyi/en/windows/security/privacy.md): A practical privacy checklist for Windows 11: diagnostic data, advertising ID, location, activity history, speech, permissions and the settings that should stay on.
- [Rollback on Windows 11: restore point, driver rollback, Windows.old or reset](https://winbook.fyi/en/windows/security/rollback.md): Pick the right recovery tool for the failure: undo a change, roll back a driver, uninstall an update, restore an image, reset Windows, or reinstall.
- [25H2 vs 26H2: upgrade now, wait, or stay put](https://winbook.fyi/en/windows/start/25h2-vs-26h2.md): Compare Windows 11 25H2 and 26H2 by build, support dates, upgrade risk and rollback. A decision page, not a feature-list recap.
- [Buying a Windows PC in 2026: the specs that actually matter](https://winbook.fyi/en/windows/start/buying-guide.md): A practical Windows 11 buying guide: CPU platform, RAM, SSD class, GPU power, display, ports and the traps that make a laptop feel old in a year.
- [First 10 minutes on a new Windows 11 PC: the decisions that matter](https://winbook.fyi/en/windows/start/first-hour.md): A safe first-run checklist for Windows 11 26H2: record the build, start updates, check drivers, remove only obvious trials, set privacy defaults, and back up the BitLocker key.
- [Windows 11 Home vs Pro: the seven differences that matter](https://winbook.fyi/en/windows/start/home-vs-pro.md): A feature-by-feature comparison of Windows 11 Home and Pro — BitLocker, Remote Desktop host, Hyper-V, domain join, Group Policy, RAM ceiling — and when the upgrade is wasted money.
- [Windows 11 LTSC 2024: who it is for, what it is not](https://winbook.fyi/en/windows/start/ltsc.md): Enterprise LTSC 2024 and IoT Enterprise LTSC 2024 explained by lifecycle, licensing, feature cadence and the workloads where LTSC is the wrong choice.
- [Moving to a new Windows PC: files, apps, licences and dev environments](https://winbook.fyi/en/windows/start/migration.md): A migration checklist that avoids cloning a dying disk: inventory, backup, browser profiles, licences, WSL, SSH keys, VMs and decommissioning.
- [Which Windows 11? 26H2, 25H2, LTSC 2024 and ARM64](https://winbook.fyi/en/windows/start/versions.md): Compare Windows 11 26H2, 25H2, LTSC 2024 and ARM64 by support window, hardware, licensing and use case, then pick one.
- [Windows 11 26H2: what changed, what to check, and whether to upgrade](https://winbook.fyi/en/windows/start/whats-new-26h2.md): Windows 11 26H2 is build 26300 and the 2026 annual feature update. Here is the support clock, the upgrade checklist, and what the release does not promise.
- [Windows 10 after the end: ESU, LTSC, or replace the machine](https://winbook.fyi/en/windows/start/win10-eol-esu.md): Windows 10 support ended on 2025-10-14. The three real routes for the machines still on it, what ESU does and does not include, and when the SSD matters more than the OS.
- [In-place upgrade repair: when it is worth the 40 minutes](https://winbook.fyi/en/windows/update/inplace-upgrade.md): How a repair install differs from a reset, what it keeps, and the two failure logs that tell you why it stopped.
- [The Insider Programme: what each channel actually costs](https://winbook.fyi/en/windows/update/insider.md): Dev, Beta and Canary differ in stability and in how hard it is to leave. What to expect before you opt a work machine in.

## Windows Server

- [Windows Server](https://winbook.fyi/en/server.md): Windows Server 2025 for students and homelabs: editions, licensing, PVE installs, AD DS and rebuildable labs.
- [Deploying to Windows: artifacts, DSC and the container boundary](https://winbook.fyi/en/server/ops/deploy.md): Ship immutable artifacts, use PowerShell DSC or a pipeline for config, and know when Windows containers help versus when they add work.
- [Two-node reverse proxy HA on Windows without pretending it is a cluster](https://winbook.fyi/en/server/ops/ha.md): Design an active/passive or DNS/LB fronted pair, keep configuration identical, handle sessions and health, and know the limits versus NLB.
- [Health checks and process supervision on Windows](https://winbook.fyi/en/server/ops/health.md): Design liveness vs readiness endpoints, supervise Node/Python/Go services, and tune IIS app-pool ping/rapid-fail without crash loops.
- [PerfMon for a Windows web server: the counters that explain a slow site](https://winbook.fyi/en/server/ops/perfmon.md): Use Performance Monitor and data collector sets to watch CPU, memory, disk, IIS app pools and connections, and read the result without superstition.
- [AD DS first domain on Windows Server 2025: a lab you can rebuild](https://winbook.fyi/en/server/roles/ad-ds.md): Promote a Windows Server 2025 Evaluation VM to a first forest/domain controller with static IP, DNS, DSRM and verification — snapshotted, not production.
- [Windows Admin Center: install, secure and actually use the gateway](https://winbook.fyi/en/server/roles/admin-center.md): A lab-tested Windows Admin Center 2606 walkthrough: install on Windows 11, certificate and port choices, add a server, tools, least privilege and a troubleshooting matrix.
- [Windows Server Backup 2025: system state, bare metal and a restore you tested](https://winbook.fyi/en/server/roles/backup.md): Install Windows Server Backup, choose a dedicated target, run system-state and bare-metal backups, and prove a restore in a lab before you need it.
- [DNS and DHCP on Windows Server 2025: a lab that does not break the LAN](https://winbook.fyi/en/server/roles/dns-dhcp.md): Install DNS and DHCP roles on a Windows Server 2025 lab DC, set forwarders, scopes and options, authorize DHCP, and test without creating a rogue server.
- [File Server quotas and shadow copies on Windows Server 2025](https://winbook.fyi/en/server/roles/file-server-quotas.md): Use FSRM quotas, file screening and Volume Shadow Copy previous versions on a Windows Server 2025 lab, and test restore without confusing snapshots with backups.
- [Hyper-V on Windows Server 2025: nested lab, VM switch and licensing](https://winbook.fyi/en/server/roles/hyper-v.md): Enable the Hyper-V role on a Windows Server 2025 lab VM, create a NAT/external switch and a generation-2 VM, and keep the Standard/Datacenter licensing boundary visible.
- [SMB share on Windows Server 2025: share and NTFS permissions without Everyone](https://winbook.fyi/en/server/roles/smb.md): Create an SMB share with explicit share/NTFS permissions, access-based enumeration, signing checks and a restore test on a Windows Server 2025 lab.
- [ASP.NET Core on IIS: Hosting Bundle, ANCM and 500.30](https://winbook.fyi/en/server/runtimes/aspnet-core.md): Install the ASP.NET Core Hosting Bundle, publish an app, set the app pool to No Managed Code, and diagnose 500.30/502.5 without guessing.
- [Runtime EOL on Windows: PHP, Java, Node and Python upgrade planning](https://winbook.fyi/en/server/runtimes/eol.md): Inventory every runtime version, check EOL with eol.wiki and the official support matrix, then plan upgrades without breaking the site.
- [Go on Windows: one binary, one service, one proxy](https://winbook.fyi/en/server/runtimes/go-service.md): Deploy a Go HTTP server as a Windows service, pass config by environment, handle graceful shutdown, and reverse-proxy it safely.
- [Multiple Java versions on Windows: pin JAVA_HOME per service](https://winbook.fyi/en/server/runtimes/java-multi-version.md): Keep JDK 17 and 21 side by side, pin JAVA_HOME in each Tomcat/service wrapper, and stop relying on a machine-wide PATH switch.
- [Java behind IIS or Nginx: proxy headers, WebSocket and memory](https://winbook.fyi/en/server/runtimes/java-proxy.md): Put Tomcat behind IIS ARR or Nginx, forward the real host/proto/client IP, keep WebSocket alive, and size the JVM instead of guessing.
- [PHP, Java, Node and Python on one Windows server: the coexistence model](https://winbook.fyi/en/server/runtimes/multi-runtime.md): Design one Windows host with IIS/Nginx on 443, isolated runtimes on internal ports, one supervisor per app, and a port/identity map you can audit.
- [Multiple Node.js versions on Windows: absolute paths beat nvm](https://winbook.fyi/en/server/runtimes/node-multi-version.md): Use nvm-windows for the CLI, but pin each service to an absolute node.exe so a global switch cannot break production.
- [Node behind IIS or Nginx: WebSocket, SSE and proxy timeouts](https://winbook.fyi/en/server/runtimes/node-proxy.md): Reverse-proxy Node with correct Host/X-Forwarded headers, WebSocket upgrades, SSE buffering and timeouts that do not cut long connections.
- [Run Node.js as a Windows service without PATH surprises](https://winbook.fyi/en/server/runtimes/node-service.md): Wrap Node with NSSM or WinSW, pin the absolute node.exe, set cwd/env, capture logs and verify the service uses the intended version.
- [PHP extensions, php.ini and OPcache on Windows](https://winbook.fyi/en/server/runtimes/php-config.md): Load only the extensions an app needs, keep php.ini per PHP version, tune OPcache safely and verify the loaded configuration.
- [Multiple PHP versions on Windows: one site, one FastCGI version](https://winbook.fyi/en/server/runtimes/php-multi-version.md): Run PHP 8.3 and 8.4 side by side on IIS with separate directories, FastCGI applications, site-level handlers and per-version php.ini.
- [Multiple Python versions on Windows: use py, venv and absolute paths](https://winbook.fyi/en/server/runtimes/python-multi-version.md): Keep Python 3.11 and 3.12 side by side, create a venv per app, and pin the interpreter instead of relying on PATH or the Store alias.
- [Python WSGI on Windows: Waitress behind IIS or Nginx](https://winbook.fyi/en/server/runtimes/python-wsgi.md): Run a WSGI app with Waitress in a venv, supervise it as a service, and reverse-proxy it without pretending Gunicorn works on Windows.
- [Multiple Tomcat instances on Windows with CATALINA_BASE](https://winbook.fyi/en/server/runtimes/tomcat-instances.md): Share one Tomcat install, create isolated CATALINA_BASE directories, change ports, and register each instance as its own service.
- [Authentication for Windows-hosted apps: IIS, AD, JWT and OIDC](https://winbook.fyi/en/server/security/auth.md): Choose Windows/AD auth, Basic, JWT or OIDC deliberately, avoid double-hop surprises, and test 401 vs 403.
- [Backup and incident response for a Windows web server](https://winbook.fyi/en/server/security/backup-ir.md): Back up config, content, certificates and data separately, test restore, and run a containment-to-recovery incident sequence.
- [IIS and Nginx security baseline on Windows Server](https://winbook.fyi/en/server/security/baseline.md): A practical baseline: remove unused features, lock request surface, separate identities, enable logging and patch the host, without claiming CIS compliance.
- [Security headers on IIS and Nginx: HSTS, CSP and the ones that matter](https://winbook.fyi/en/server/security/headers.md): Add HSTS, CSP, nosniff, frame protection and Referrer-Policy with IIS/Nginx, test them, and avoid breaking the app with a copied CSP.
- [Least privilege for IIS and Windows services: app pools, gMSA and ACLs](https://winbook.fyi/en/server/security/least-privilege.md): Pick the right service identity, grant only the NTFS rights the app needs, and use gMSA when a domain service account must be managed.
- [Logs, audit and SIEM for a Windows web server](https://winbook.fyi/en/server/security/logging.md): Collect IIS/Nginx access logs, Windows security events and app logs, keep time and retention sane, and alert on what matters.
- [Patching and supply chain for a Windows web tier](https://winbook.fyi/en/server/security/patching.md): Patch Windows, IIS/Nginx, runtimes and dependencies on a schedule, verify artifacts, and plan rollback before the maintenance window.
- [File upload security on IIS and Nginx: stop upload-to-RCE](https://winbook.fyi/en/server/security/upload.md): Validate uploads, store them outside the executable root, block script execution in upload paths, and defend against path traversal.
- [WAF on a Windows web tier: edge, CRS and realistic limits](https://winbook.fyi/en/server/security/waf.md): Choose between a CDN/edge WAF, IIS request filtering and ModSecurity/CRS, roll out in log-only mode, and handle false positives.
- [Server Core vs Desktop Experience: choose at install time](https://winbook.fyi/en/server/start/core-vs-desktop.md): Compare Windows Server 2025 Core and Desktop Experience by management, app compatibility, patch surface and lab workflow, before you install the wrong one.
- [Windows Server 2025 editions and licensing: Standard, Datacenter and CALs](https://winbook.fyi/en/server/start/editions-licensing.md): What Standard and Datacenter actually license, how OSE counts and CALs work, and why the evaluation edition is the right lab start.
- [Windows Server 2025 Evaluation on PVE: install it without a licensing mess](https://winbook.fyi/en/server/start/eval-install.md): Install the 180-day Windows Server 2025 Evaluation on Proxmox VE with q35/OVMF, VirtIO drivers and a clean snapshot — no rearm scripts, no mirror ISOs.
- [TLS certificates on Windows: win-acme, IIS binding and renewal](https://winbook.fyi/en/server/tls/certificates.md): Request certificates with win-acme, bind them to IIS, export PEM for Nginx, and prove renewal works before the old certificate expires.
- [DNS and hostnames for a Windows web server: plan names before TLS](https://winbook.fyi/en/server/tls/dns.md): Choose A/AAAA/CNAME records, split-horizon names and TTLs, then verify the name resolves to the server before requesting a certificate.
- [HTTP/2, compression and caching on IIS and Nginx](https://winbook.fyi/en/server/tls/http2.md): Enable HTTP/2 over TLS, compress text correctly, set cache headers, and avoid double compression or caching secrets.
- [Large uploads and long requests: 413/504 across IIS, Nginx and the app](https://winbook.fyi/en/server/tls/large-files.md): Size body limits, timeouts and buffering at every hop, and choose streaming over a 30-minute HTTP request.
- [Real client IP, path base and Host through a reverse proxy](https://winbook.fyi/en/server/tls/proxy-headers.md): Forward X-Forwarded-For/Proto/Prefix and Host correctly, trust only the proxy, and stop redirect loops and wrong absolute URLs.
- [Windows TLS hardening: Schannel, cipher suites and safe rollback](https://winbook.fyi/en/server/tls/schannel.md): Harden IIS/Nginx TLS on Windows with TLS 1.2/1.3, deliberate cipher suites, a registry backup and client testing before disabling old protocols.
- [Apache 2.4 on Windows: a legacy path, not a default](https://winbook.fyi/en/server/web/apache-legacy.md): Run Apache 2.4 on Windows only for compatibility, with the right binaries, httpd.conf, service install and reverse-proxy limits.
- [Caddy on Windows: automatic TLS with one binary](https://winbook.fyi/en/server/web/caddy.md): Use Caddy on Windows for a small site or reverse proxy, with automatic public TLS, internal TLS for a lab, and a Caddyfile you can validate.
- [HTTP/3 on Windows Server: IIS can, Nginx Win32 cannot](https://winbook.fyi/en/server/web/http3.md): Enable HTTP/3 on IIS/ASP.NET Core with HTTPS and EnableHttp3, advertise it with Alt-Svc, test QUIC over UDP 443, and understand the Windows Nginx limit.
- [IIS application pool identity and NTFS permissions: least privilege that works](https://winbook.fyi/en/server/web/iis-app-pools.md): Use ApplicationPoolIdentity, grant only the NTFS rights the site needs, and tune app-pool settings without breaking the app or widening access.
- [IIS ARR reverse proxy: put Node, Java or Python behind IIS](https://winbook.fyi/en/server/web/iis-arr.md): Install ARR and URL Rewrite, enable proxy, create a server farm, preserve Host/X-Forwarded headers, and avoid turning IIS into an open proxy.
- [IIS bindings, host headers and SNI: host many sites on one IP](https://winbook.fyi/en/server/web/iis-bindings.md): Understand IP:port:host-header bindings, add multiple HTTP/HTTPS sites, use SNI correctly, and diagnose duplicate-binding and certificate-name failures.
- [Back up and migrate IIS configuration without copying the whole server](https://winbook.fyi/en/server/web/iis-config.md): Use appcmd backups, export site/config XML, and understand shared configuration before migrating IIS to a new host.
- [Install IIS on Windows Server 2025 without installing everything](https://winbook.fyi/en/server/web/iis-install.md): Add the IIS role with the minimum role services, verify W3SVC, open the right firewall port and avoid the default-site habits that cause later trouble.
- [IIS logs and failed request tracing: find the 500 before you reinstall](https://winbook.fyi/en/server/web/iis-logs.md): Read W3C IIS logs, enable failed request tracing, correlate 500/503 with app-pool and HTTP.sys events, and keep logs useful without leaking data.
- [HttpPlatformHandler: run Node or Python behind IIS without FastCGI](https://winbook.fyi/en/server/web/iis-node-python.md): Use the IIS HttpPlatformHandler extension to launch a Node or Python process, pass the dynamic port, capture stdout, and avoid process-per-request mistakes.
- [PHP 8.4 on IIS FastCGI: install it without php-fpm myths](https://winbook.fyi/en/server/web/iis-php.md): Install PHP 8.4 NTS on Windows, add IIS FastCGI and the handler, set a safe php.ini, verify phpinfo, and remove the lab page afterwards.
- [IIS request filtering, upload limits and timeouts that cause 413/504](https://winbook.fyi/en/server/web/iis-request-limits.md): Tune IIS request limits, upload size, header/URL limits and timeout settings deliberately, and tell 413, 404.13 and 504 apart.
- [IIS sites, applications and virtual directories: the four-layer model](https://winbook.fyi/en/server/web/iis-sites.md): Understand site vs application vs virtual directory vs application pool, create a lab site on 8080, and choose the isolation boundary deliberately.
- [IIS URL Rewrite: redirects that do not loop](https://winbook.fyi/en/server/web/iis-url-rewrite.md): Install URL Rewrite, write HTTP-to-HTTPS and canonical-host rules, understand rule order and stopProcessing, and test 301s without breaking a reverse proxy.
- [Nginx on Windows Server: install, test and run it as a service](https://winbook.fyi/en/server/web/nginx-install.md): Unpack Nginx on Windows, test the config from the right directory, run it on 8081, and wrap it as a service without pretending it is Linux Nginx.
- [Nginx + PHP FastCGI on Windows: no php-fpm, no fantasy](https://winbook.fyi/en/server/web/nginx-php.md): Run php-cgi as a FastCGI listener, point Nginx at it, set SCRIPT_FILENAME and fix_pathinfo, and know why IIS FastCGI is often the better Windows choice.
- [Nginx server blocks and reverse proxy on Windows](https://winbook.fyi/en/server/web/nginx-sites.md): Host multiple names with server_name, serve static roots, proxy Node/Java upstreams, and forward Host/X-Forwarded headers without loops.
- [Nginx TLS on Windows: certificates, HTTP/2 and sane defaults](https://winbook.fyi/en/server/web/nginx-tls.md): Configure PEM certificates, TLS 1.2/1.3, HTTP/2, SNI and HSTS on Windows Nginx, and test the handshake instead of trusting a browser padlock.

## Hardware

- [Hardware](https://winbook.fyi/en/hardware.md): Windows-first hardware guides — buying, CPU, memory, storage, graphics, displays, laptops, builds, homelab servers and diagnostics, plus vendor hubs.
- [Case airflow: positive vs negative pressure, and why fan count is not cooling](https://winbook.fyi/en/hardware/build/airflow.md): How intake/exhaust balance affects dust and temperatures, the layouts that work, and how to verify a change instead of guessing.
- [BIOS, ME and SSD firmware: when updating is worth the risk](https://winbook.fyi/en/hardware/build/firmware-updates.md): A decision rule for firmware updates, the order to do them in, and the BitLocker/TPM steps that prevent a recovery prompt.
- [BIOS and firmware updates by vendor: Dell, HP and ASUS](https://winbook.fyi/en/hardware/build/firmware-vendors.md): Three vendor toolchains, the order of operations that avoids a bricked board, and how to verify the version actually changed after the reboot.
- [First boot checklist: from bare parts to a Windows install](https://winbook.fyi/en/hardware/build/first-boot.md): A safe assembly and first-power-on order, the firmware settings that must be right, and the failures that happen on day one.
- [Mini-ITX builds: where the money goes and what actually limits you](https://winbook.fyi/en/hardware/build/mini-itx.md): Case volume, GPU length, SFX power, cooler height and PCIe risers — the five constraints that decide whether an ITX build is quiet, fast or a compromise.
- [PSU sizing: 12VHPWR, transient spikes and what 80 PLUS means](https://winbook.fyi/en/hardware/build/psu.md): How to size a power supply for a GPU with millisecond spikes, why the wattage label is not the whole story, and what to check before buying.
- [UEFI settings that change how Windows behaves](https://winbook.fyi/en/hardware/build/uefi-settings.md): Secure Boot, fTPM, CSM, Resizable BAR and IOMMU: what each switch does to Windows, and the order to change them in.
- [Windows PC budget tiers: where the money actually goes](https://winbook.fyi/en/hardware/buy/budget-tiers.md): Four practical price tiers for a Windows 11 desktop, what to spend on CPU/GPU/RAM/SSD at each, and the parts that are false economy in 2026.
- [Hardware requirements by Windows version: 11 26H2, LTSC and Server](https://winbook.fyi/en/hardware/buy/os-hardware-matrix.md): One matrix for TPM, Secure Boot, CPU support, RAM and storage across Windows 11 26H2, LTSC 2024, Server 2025 and Server 2022 — and what each rule protects.
- [Prebuilt, DIY or mini PC: warranty, drivers and the Windows licence](https://winbook.fyi/en/hardware/buy/prebuilt-vs-diy.md): Compare brand desktops, self-built PCs and mini PCs on driver delivery, BIOS locks, upgrade paths, warranty and how the Windows licence is tied.
- [Judging a real discount on Windows hardware](https://winbook.fyi/en/hardware/buy/pricing-channels.md): A method for telling a genuine price drop from a raised-then-cut one: part numbers, config checks, warranty terms and channel risks.
- [Used Windows PC checklist: 12 checks before you pay](https://winbook.fyi/en/hardware/buy/used-checklist.md): Verify activation, TPM, Secure Boot, disk health, battery, MDM enrolment and hidden locks on a used or refurbished Windows machine.
- [Chipset, PCIe lanes and USB controllers: interfaces are not bandwidth](https://winbook.fyi/en/hardware/cpu/chipset-lanes.md): Why a board with four M.2 slots may only run two at full speed, how lane sharing shows up in Windows, and what to check in the manual before buying.
- [Cores or clock: choosing a CPU for WSL2, compiles, games and VMs](https://winbook.fyi/en/hardware/cpu/cores-vs-clock.md): A workload-first way to decide between more cores and higher clocks, with the Windows and virtualisation limits that change the answer.
- [P/E hybrid cores and the Windows scheduler](https://winbook.fyi/en/hardware/cpu/hybrid-cores.md): How Windows 11 treats performance and efficiency cores, why background work lands on E-cores, and what processor groups mean above 64 logical CPUs.
- [Is this CPU supported by Windows? Model list, microcode and mitigations](https://winbook.fyi/en/hardware/cpu/support-microcode.md): Check a CPU against Microsoft's support list, read the microcode revision Windows loaded, and understand what Spectre-class mitigations cost.
- [Virtualisation flags: checking VT-x, IOMMU, SLAT and nested support](https://winbook.fyi/en/hardware/cpu/virtualization-flags.md): Verify what your firmware and CPU actually expose for Hyper-V, WSL2, VBS and nested virtualisation — with the checks that fail silently.
- [0x124, 0x9C and 0x101: when a blue screen means hardware](https://winbook.fyi/en/hardware/diag/bsod-hardware.md): Distinguish the bugchecks that point at CPU, memory or power delivery from ones that point at drivers, and run the checks in the right order.
- [When to replace hardware instead of repairing it](https://winbook.fyi/en/hardware/diag/lifecycle-replace.md): A cost-and-support way to decide repair versus replace, using Windows lifecycle dates rather than gut feeling.
- [Hardware measurement discipline: what makes a number trustworthy](https://winbook.fyi/en/hardware/diag/measurement-method.md): Fix the build, driver, power plan and temperature before comparing anything, report percentiles instead of averages, and keep the raw data.
- [Retiring a drive or PC: wipe it properly before it leaves](https://winbook.fyi/en/hardware/diag/retire-wipe.md): Which wipe method matches the medium, how BitLocker changes the calculus, and the checks before selling or recycling a Windows machine.
- [WHEA and bugchecks: building a hardware evidence chain](https://winbook.fyi/en/hardware/diag/whea-bugcheck.md): Which event IDs and bugcheck codes point at hardware, how to read them together, and what to collect before an RMA.
- [No signal, black screen or lines: diagnosing a display fault](https://winbook.fyi/en/hardware/display/display-faults.md): Separate cable, port, panel, GPU and driver faults in the right order — and know which symptoms mean the monitor is dying rather than misconfigured.
- [High DPI and scaling: why remote desktop and old apps look blurry](https://winbook.fyi/en/hardware/display/dpi-scaling.md): How per-monitor DPI awareness works, why legacy apps blur at 150%, and the fixes that do and do not help.
- [Windows HDR: the whole chain has to support it](https://winbook.fyi/en/hardware/display/hdr-chain.md): Why HDR stays off or looks washed out: panel capability, cable bandwidth, EDID, Windows settings and per-app tone mapping.
- [8000 Hz mice on Windows: what the polling rate really costs](https://winbook.fyi/en/hardware/display/input-polling.md): How USB polling and Windows input work, what changes at 1000/4000/8000 Hz, and how to tell whether it helps or just burns CPU.
- [Choosing a monitor for Windows: panel, refresh rate and VRR](https://winbook.fyi/en/hardware/display/monitor-choice.md): What actually matters for Windows work and play: panel technology, resolution vs scaling, refresh rate, VRR behaviour and the ports that carry it.
- [USB4, Thunderbolt and docks: what Windows can and cannot do over one cable](https://winbook.fyi/en/hardware/display/usb4-dock.md): How display, data and power share a USB-C link, why docks drop monitors or refresh rates, and how to size the cable you actually need.
- [AMD Radeon drivers on Windows: branches, clean install and rollback](https://winbook.fyi/en/hardware/gpu/amd-drivers.md): Which AMD driver branch to run, how to stop Windows Update fighting Adrenalin, and how to roll back without reinstalling Windows.
- [Driver rollback on Windows: when it works, when it does not](https://winbook.fyi/en/hardware/gpu/driver-rollback.md): Use Device Manager and PnPUtil to roll a display driver back, understand why the button is greyed out, and recover from a black screen.
- [Intel Arc and integrated graphics drivers on Windows](https://winbook.fyi/en/hardware/gpu/intel-drivers.md): DCH packaging, Arc Control versus the legacy control panel, hybrid graphics with a discrete GPU, and the update paths that actually work.
- [GPUs in virtual machines: passthrough, DDA and what Windows guests can use](https://winbook.fyi/en/hardware/gpu/passthrough.md): The three ways to give a Windows VM a GPU, what each one supports, and the IOMMU/vBIOS problems that decide whether it boots.
- [WDDM, HAGS and MPO: why 'stutter' is not a frame rate problem](https://winbook.fyi/en/hardware/gpu/wddm-hags-mpo.md): How the Windows display stack composes frames, what hardware-accelerated GPU scheduling and multi-plane overlays change, and how to test the difference.
- [Proxmox host memory: what Windows guests really cost](https://winbook.fyi/en/hardware/homelab/host-memory.md): Measured host memory on a 31.2GB Proxmox box running two Windows 11 VMs, why the numbers are larger than the guest allocation, and how to plan headroom.
- [A mini PC or old laptop as a Proxmox host: sizing the box](https://winbook.fyi/en/hardware/homelab/mini-pc-host.md): How many Windows VMs a small host can carry, what cores and RAM to buy, and the NIC and storage choices that decide whether it is usable.
- [Homelab networking for Windows: 2.5GbE, switches and VLANs](https://winbook.fyi/en/hardware/homelab/network-hardware.md): What actually bottlenecks a Windows lab network, when 2.5GbE is worth it, and the switch/VLAN basics that make remote management safe.
- [Server hardware and Windows Server: ECC, NIC teaming, iSCSI and IPMI](https://winbook.fyi/en/hardware/homelab/server-hardware.md): The hardware features that actually change how Windows Server behaves, and where consumer hardware stops being adequate.
- [Used servers for a Windows homelab: iDRAC, RAID and drivers](https://winbook.fyi/en/hardware/homelab/used-server.md): What to check before buying a second-hand rack server, how out-of-band management changes the experience, and where the drivers come from.
- [Hygon and Moore Threads on Windows: support boundaries, not benchmark promises](https://winbook.fyi/en/hardware/hygon-moore-threads.md): Tier B vendor guide for Hygon CPUs and Moore Threads GPUs on Windows 11: official driver entry points, platform limits and why we do not publish scores.
- [Reading powercfg /batteryreport: capacity, cycles and real wear](https://winbook.fyi/en/hardware/laptop/battery-report.md): How to read design capacity versus full charge capacity, spot a dying battery, and tell wear apart from a calibration problem.
- [External GPUs and multi-monitor on laptops: bandwidth and gotchas](https://winbook.fyi/en/hardware/laptop/egpu-multidisplay.md): What an eGPU over Thunderbolt/USB4 can and cannot do, why internal displays differ, and how to plan a multi-monitor laptop setup.
- [Modern Standby: is the laptop actually sleeping?](https://winbook.fyi/en/hardware/laptop/modern-standby.md): How S0ix differs from S3, why a closed laptop drains battery, and how to find out what kept the machine awake.
- [Windows power plans: what balanced, performance and efficiency change](https://winbook.fyi/en/hardware/laptop/power-plans.md): How power schemes map to processor and device settings, what the Windows power slider does, and when a custom plan is worth it.
- [Laptop throttling: tell a thermal wall from a power wall](https://winbook.fyi/en/hardware/laptop/throttling.md): Separate heat from firmware power limits using Windows counters, then decide whether repasting, a cooler or a different power plan can help.
- [NVIDIA on Windows 11 26H2: driver branch, control panel and rollback](https://winbook.fyi/en/hardware/nvidia.md): A vendor page skeleton for NVIDIA: driver branch, installation order, the settings that matter, and how to roll back without a clean install.
- [Vendor matrix: NVIDIA, AMD, Intel, Hygon and Moore Threads](https://winbook.fyi/en/hardware/overview.md): Compare official Windows support and driver channels for NVIDIA, AMD, Intel, Hygon and Moore Threads, with links to each vendor hub and the boundaries that decide what we will claim.
- [16, 32 or 64GB RAM for Windows 11, WSL and gaming?](https://winbook.fyi/en/hardware/ram.md): Size Windows 11 memory by workload, understand committed memory and page file, and test XMP/EXPO stability instead of trusting a “RAM cleaner”.
- [Channels, ranks and shared graphics memory: why adding RAM can feel slower](https://winbook.fyi/en/hardware/ram/channels-uma.md): How channel population changes bandwidth, what ranks do, how integrated graphics steals memory bandwidth, and how to check the layout Windows sees.
- [Memory compression and the page file: what Windows actually does](https://winbook.fyi/en/hardware/ram/compression-pagefile.md): How standby memory, memory compression and the page file interact, how to read the counters, and why 'free RAM' is the wrong number to watch.
- [Windows Memory Diagnostic and memtest: from symptom to RMA](https://winbook.fyi/en/hardware/ram/diagnostics.md): Run mdsched, read the result from Event Viewer, then decide whether one pass is enough or you need MemTest86 — and how to isolate the module, slot or CPU memory controller.
- [Does ECC memory matter on Windows? What WHEA can and cannot tell you](https://winbook.fyi/en/hardware/ram/ecc-whea.md): How ECC works on Windows desktops and servers, what WHEA logs, why ECC does not replace backups, and when it is worth the platform cost.
- [XMP and EXPO on Windows: enable it, then prove it is stable](https://winbook.fyi/en/hardware/ram/xmp-expo.md): What XMP/EXPO actually changes, how to enable it safely, which Windows errors reveal instability, and how to roll back to JEDEC defaults.
- [SSD for Windows 11: DRAM, HMB and QLC beyond the capacity label](https://winbook.fyi/en/hardware/ssd.md): Choose a Windows 11 system SSD by controller, DRAM/HMB, TLC/QLC, thermals and endurance, and verify TRIM/health instead of chasing sequential numbers.
- [BitLocker and self-encrypting drives: when hardware encryption helps](https://winbook.fyi/en/hardware/storage/bitlocker-hardware-encryption.md): How BitLocker uses eDrive/Opal drives, how to check the encryption status, why hardware encryption has a trust caveat, and where recovery keys live.
- [HDDs in 2026: CMR vs SMR, and what Windows can still do with spinning disks](https://winbook.fyi/en/hardware/storage/hdd-cmr-smr.md): Where hard drives still make sense on Windows, how SMR changes write behaviour, and how storage pools and ReFS fit in.
- [Reading drive health: turning SMART and NVMe counters into a decision](https://winbook.fyi/en/hardware/storage/health-smart.md): Which attributes actually predict failure, how Windows exposes them, and the thresholds that mean replace instead of monitor.
- [NVMe generations on Windows: what PCIe 4.0 and 5.0 change, and what they do not](https://winbook.fyi/en/hardware/storage/nvme-generations.md): Where NVMe speed actually shows up, why thermal throttling is invisible in Explorer, and which Windows tools tell you the truth.
- [Storage Spaces on Windows: software RAID without the marketing](https://winbook.fyi/en/hardware/storage/storage-spaces.md): Build a pool, choose mirror or parity, understand why parity writes are slow, and know the cases where Storage Spaces is the wrong tool.

## Downloads

- [Windows downloads: the official sources, verified](https://winbook.fyi/en/downloads.md): Official Windows 11, Windows 10, Windows Server, ADK, Windows Admin Center and lab tool downloads — vendor links only, checked, with hash verification and licensing rules.
- [Lab downloads: Proxmox VE, VirtIO drivers, Rufus, Ventoy](https://winbook.fyi/en/downloads/lab.md): The utilities this site's Windows lab actually uses — Proxmox VE ISO, VirtIO Windows drivers, USB writers and 7-Zip — with the verification steps before first boot.
- [Windows Server 2025, 2022, 2019 and 2016 evaluation downloads](https://winbook.fyi/en/downloads/server.md): Official Windows Server evaluation ISOs and VHDs, the 180-day rules, Hyper-V Server, Server Insider builds, ADK and MDT — plus which version to pick in 2026.
- [Windows admin and developer tools: WAC, RSAT, Sysinternals, PowerShell 7](https://winbook.fyi/en/downloads/tools.md): Official downloads for Windows Admin Center, RSAT, Sysinternals, PowerShell 7, Windows Terminal, WinGet, .NET and the VC++ runtime — and which ones belong on a server.
- [Windows 11 and Windows 10 ISO downloads (official)](https://winbook.fyi/en/downloads/windows.md): Where to get Windows 11 26H2 x64/Arm64 ISOs, Media Creation Tool, Installation Assistant, Enterprise and IoT LTSC evaluations, and what Windows 10 end of support means for downloads.

## Lab

- [The lab: how a page earns its evidence badge](https://winbook.fyi/en/lab.md): Every page on this site carries an evidence level. This is what E1, E2 and E3 mean, which machines produce them, and what a badge does not claim.
- [Lab method: E1/E2/E3, M-V/M-P, PVE templates and snapshots](https://winbook.fyi/en/lab/method.md): How WinBook produces evidence: official sources, PVE templates, GPU passthrough measurements, raw data and the limits of each level.